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EXAMINER'S AMENDMENT 

1 . An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1 .312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview 
with Christopher Tobin (Reg. No. 40,290) on 06/25/2008. 

The application has been amended as follows: 
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1. (Currently Amended) An authentication system, said authentication system 
comprising: 

a portable card terminal, including: 

first identification information storage means having a first identification 
information stored therein for discriminating said portable card terminal, said first 
identification information comprising a portable card terminal identifier that uniquely 
identifies the portable card terminal, 

operating means for inputting a second identification information associated with 
said first identification information, 

encryption means for encrypting the second identification information input by 
said operating means based on encryption key information, and 

first communication means for communication with an authentication device, 
wherein said communication includes transmitting the first identification information to 
said authentication device and receiving said encryption key information from the 
authentication device in response to transmitting the first identification information; 

said authentication device, provided independently of said portable card terminal 
for communication with said portable card terminal, the authentication device including: 

second identification information storage means for storage of the first 
identification information and the second identification information therein, 

encryption key information generating means for generating said encryption key 
information, wherein said encryption key information comprises a random number, and 
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wherein said encryption key information is generated in response to receiving the first 
identification information from said portable terminal, 

second communication means for communication with said portable card 
terminal, and 

comparator authentication means for comparing and authenticating the second 
identification information encrypted by said encryption means based on said encryption 
key information; 

wherein said portable card terminal encrypts the second identification information 
input from said operating means, based on said encryption key information received 
from said authentication device, the so-encrypted second identification information is 
transmitted through said first communication means to said authentication device; and 

wherein, in said authentication device, the encrypted second identification 
information received through said second communication means and the second 
identification information stored by said second identification information storage means 
are compared to each other based on said encryption key information to perform the 
authentication ; and 

wherein said portable card terminal includes a transient storage means for 
storing the second identification information input by said operating means until 
authentication of said portable card terminal by said authentication device. 

2. (Previously Presented) The authentication system according to claim 1 
wherein said authentication device includes: 
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decoding means for decoding the second identification information encrypted by 
said encrypting means based on said encryption key information, 

said authentication device decoding the received encrypted second identification 
information based on said encryption key information, said authentication device 
comparing the decoded second identification information to the second identification 
information stored in said second identification information storage means, by way of 
performing the authentication. 

3. (Previously Presented) The authentication system according to claim 2, 
wherein said second identification information is a password of a service user made up 
of a preset letter string or a preset string of numerical figures, 

4. (Previously Presented) The authentication system according to claim 3 for 
authenticating the service user to whom preset services are offered from a service 
provider in a credit sale system, an inter-account instant payment system and in E- 
commerce carried out over a preset network, wherein 

said portable card terminal is a card-shaped portable terminal issued by said 
service provider to said service user, 

said authentication device being contained in a host computer in which said 
service provider authenticates usage by said service user, and 
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said service user being authenticated by said authentication device 
authenticating said portable card terminal and that said service user is a true owner of 
the portable card terminal. 

5. (Previously Presented) The authentication system according to claim 4, 
wherein said first and second communication means are wireless communication 
means. 

6. (Cancelled). 

7. (Cancelled). 

8. (Currently Amended) The authentication system according to claim [§] 1, 
wherein said second identification information stored in said transient storage means is 
erased every preset time interval. 

9. (Currently Amended) The authentication system according to claim [§] 1 , 
wherein said operating means in said portable card terminal includes means for erasing 
the second identification information stored in said transient storage means. 

10. (Previously Presented) The authentication system according to claim 4, 
wherein said operating means in said portable card terminal includes a plurality of input 
locations respectively used for indicating letters or numerical figures for inputting said 
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second identification information, and wherein the input locations corresponding to 
individual ones of the letters or numerical figures are variable, such that individual ones 
of the letters or numerical figures are resident at one of the plurality of input locations 
when said second identification information is input a first time, and are resident at 
another of the plurality of input locations when said second identification information is 
input a second time. 

1 1 . (Previously Presented) The authentication system according to claim 10, 
wherein the plurality of input locations are varied prior to the inputting of said second 
identification information. 

12. (Previously Presented) The authentication system according to claim 4, 
wherein said operating means in said portable card terminal includes a display unit for 
displaying letters and a selection unit for selecting the letters displayed on said display 
unit, and wherein the second identification information input by said operating means is 
made up by a string of letters selected by said selection unit from among plural letters 
sequentially displayed on said display unit. 

13. (Currently Amended) An authentication method in which a portable card 
terminal is authenticated by an authentication device provided independently of said 
portable card terminal, said method comprising 
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an operating step of inputting a second identification information associated with 
a first identification information that discriminates said portable card terminal and that is 
stored in a first identification information storage means of said portable card terminal, 
said first identification information comprising a portable card terminal identifier that 
uniquely identifies the portable card terminal, 

an encryption key information generating step of generating an encryption key 
information by transmitting the first identification information from the portable card 
terminal to the authentication device, and receiving said encryption key information from 
the authentication device in response to transmitting the first identification information, 
wherein said encryption key information is generated by the authentication device in 
response to receiving the first identification information from the portable card terminal, 

an encrypting step of encrypting the second identification information input at 
said operating step, based on the encryption key information generated in said 
encryption key information generating step, and 

a comparison authentication step of comparing the second identification 
information encrypted in said encrypting step to the second identification information as 
stored in a second identification information storage means to perform the 
authentication, and 

a transient storage step of transiently storing the second identification information 
input in said operating step until authentication of said portable card terminal bv said 
authentication device . 
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14. (Previously Presented) The authentication method according to claim 13 
further comprising 

a decoding step of decoding the second identification information, encrypted in 
said encrypting step, based on said encryption key information, 

the encrypted second identification information being decoded in said decoding 
step based on said encryption key information, and the decoded second identification 
information being compared to the second identification information stored in said 
second identification information storage means by way of performing the 
authentication. 

15. (Previously Presented) The authentication method according to claim 14, 
wherein the encryption key information comprises a random number. 

16. (Previously Presented) The authentication method according to claim 15 for 
authenticating a service user to whom preset services are offered from a service 
provider in a credit sale system, an inter-account instant payment system and in E- 
commerce carried out over a preset network, wherein 

said portable card terminal is a card-shaped portable terminal issued by said 
service provider to said service user, 

said authentication device being an authentication device contained in a host 
computer in which said service provider authenticates usage by said service user, and 
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said service user being authenticated by said authentication device 
authenticating said portable card terminal and that said service user is a true owner of 
the portable card terminal. 

17. (Previously Presented) The authentication method according to claim 16, 
wherein said portable card terminal and the authentication device are interconnected by 
wireless communication means. 

18. (Cancelled). 

19. (Cancelled). 

20. (Currently Amended) The authentication method according to claim [48] 13, 
wherein said second identification information stored in said transient storage step is 
erased every preset time interval. 

21 . (Currently Amended) The authentication method according to claim [18] 13, 
wherein said operating step includes a step of erasing the second identification 
information stored in said transient storage step. 

22. (Previously Presented) The authentication method according to claim 16, 
wherein inputting said second identification information comprises using a plurality of 
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input locations respectively indicating letters or numerical figures for inputting said 
second identification information, and wherein the input locations corresponding to 
individual ones of the letters or numerical figures are variable, such that individual ones 
of the letters or numerical figures are resident at one of the plurality of input locations 
when said second identification information is input a first time, and are resident at 
another of the plurality of input locations when said second identification information is 
input a second time. 

23. (Previously Presented) The authentication method according to claim 22, 
wherein the plurality of input locations are varied prior to inputting of said second 
identification information. 

24. (Previously Presented) The authentication method according to claim 16, 
wherein said operating step includes a display step of displaying letters and a selection 
step of selecting the letters displayed in said display step, and wherein the second 
identification information input by said operating step is made up by a string of letters 
selected in said selection step from among plural letters sequentially displayed in said 
display step. 

25. (Canceled) 



26. (Canceled) 
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27. (Canceled) 



28. (Canceled) 



29. (Canceled) 



30. (Canceled) 



31 . (Canceled) 



32. (Canceled) 



33. (Canceled). 



34. (Canceled) 



35. (Currently Amended) A portable card terminal authenticated by an 
authentication device, comprising, 

first identification information storage means for storing a first identification 
information for discriminating said portable card terminal, said first identification 
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information comprising a portable card terminal identifier that uniquely identifies the 
portable card terminal, 

operating means for inputting a second identification information associated with 
said first identification information, 

communication means for communication with said authentication device 
wherein said communication including transmitting the first identification information 
from the portable card terminal to the authentication device, and receiving encryption 
key information from the authentication device in response to transmitting the first 
identification information, and 

encrypting means for encrypting the second identification information input by 
said operating means based on said encryption key information received from said 
authentication device, wherein said encryption key information is generated by the 
authentication device in response to receiving the first identification information from the 
portable card terminal, and 

transient storage means for storing the second identification information input by 
said operating means until authentication of said portable card terminal bv said 
authentication device . 



36. (Previously Presented) The portable card terminal according to claim 35, 
wherein said encryption key information comprises a random number. 
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37. (Previously Presented) The portable card terminal according to claim 35, 
wherein the portable card terminal is issued to a service user by a service provider to 
offer preset services for said service user in a credit sale system, an inter-account 
instant payment system and E-commerce carried out over a preset network and is in the 
form of a card. 

38. (Previously Presented) The portable card terminal according to claim 37, 
wherein said communication means are wireless communication means. 

39. (Cancelled). 

40. (Cancelled). 

41 . (Currently Amended) The portable card terminal according to claim [39] 35, 
wherein said second identification information stored in said transient storage means is 
erased every preset time interval. 

42. (Currently Amended) The portable card terminal according to claim 35, 
wherein said operating means in said portable card terminal includes means for erasing 
the second identification information stored in said transient storage means. 
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43. (Previously Presented) The portable card terminal according to claim 37, 
wherein said operating means includes a plurality of input locations respectively used 
for indicating letters or numerical figures for inputting said second identification 
information, and wherein the input locations corresponding to individual ones of the 
letters or numerical figures are variable, such that individual ones of the letters or 
numerical figures are resident at one of the plurality of input locations when said second 
identification information is input a first time, and are resident at another of the plurality 
of input locations when said second identification information is input a second time. 

44. (Previously Presented) The portable card terminal according to claim 43, 
wherein the plurality of input locations are varied prior to the inputting of said second 
identification information. 

45. (Previously Presented) The portable card terminal according to claim 37, 
wherein said operating means includes a display unit for displaying letters and a 
selection unit for selecting the letters displayed in said display unit, and wherein the 
second identification information input by said operating means is made up by a string 
of letters selected in said selection unit from among plural letters sequentially displayed 
on said display unit. 

46. (Currently Amended) An authentication system made up by a portable card 
terminal and an authentication device provided independently of said portable card 
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terminal for communication with said portable card terminal, said authentication system 
comprising: 

said portable card terminal, including 

first identification information storage means having a first identification 
information stored therein for discriminating said portable card terminal, said first 
identification information comprising a portable card terminal identifier that uniquely 
identifies the portable card terminal, 

operating means including display means for irregularly displaying letters 
included in a group of letters and selection means for selecting the letters making up a 
second identification information from among the letters irregularly displayed on said 
display means, said operating means inputting the second identification information 
associated with said first identification information, 

encryption means for encrypting the second identification information input by 
said operating means based on an encryption key information, and 

first communication means for communication with said authentication device, 
wherein said communication includes transmitting the first identification information to 
said authentication device and receiving said encryption key information from the 
authentication device in response to transmitting the first identification information; 

said authentication device, including 

second identification information storage means having the first identification 
information and the second identification information stored therein, 
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encryption key information generating means for generating said encryption key 
information, wherein said encryption key information is generated in response to 
receiving the first identification information from said portable terminal, 

second communication means for communication with said portable card 
terminal, and 

comparator authentication means for comparing the second identification 
information encrypted by said encryption means to the second identification information 
stored in the second identification information storage means; wherein 

said portable card terminal encrypts the second identification information input 
from said operating means, based on said encryption key information received from 
said authentication device through said first communication means, and the so- 
encrypted second identification information is transmitted through said first 
communication means to said authentication device; and 

wherein, in said authentication device, the encrypted second identification 
information received through said second communication means and the second 
identification information stored by said second identification information storage means 
are compared to each other based on said encryption key information to perform the 
authentication ; and 

wherein said portable card terminal includes a transient storage means for 
storing the second identification information input bv said operating means until 
authentication of said portable card terminal by said authentication device . 
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Allowable Subject Matter 

2. The following is an examiner's statement of reasons for allowance: The prior art 
fails to teach or suggest a method of securely transferring authentication information 
between an authentication device and a portable card terminal that includes a transient 
storage means that stores second identification information (e.g. PIN) input by operating 
means until authentication of the portable card terminal by the authentication device. 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to MICHAEL PYZOCHA whose telephone number is 
(571)272-3875. The examiner can normally be reached on Monday-Thursday, 7:00am - 
4:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel Moise can be reached on (571) 272-3865. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

MJP 

/Emmanuel L. Moise/ 

Supervisory Patent Examiner, Art Unit 2137 



